---
id: "CVE-2021-30807"
kind: "vulnerability"
aliases: ["CVE-2021-30807"]
title: "Apple Multiple Products: Apple Multiple Products Memory Corruption Vulnerability"
severity: "critical"
cvss: 9.3
epss: 0.28839
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Apple Multiple Products", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["apple-devices", "exploited", "infrastructure", "ios", "ipados", "macos", "watchos"]
not_affected_if: ["fully-patched-devices"]
published_at: "2021-10-19T14:15:08+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30807", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-30807", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30807", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Apple Multiple Products: Apple Multiple Products Memory Corruption Vulnerability

Apple iOS, iPadOS, macOS and watchOS have a memory corruption bug in the IOMobileFrameBuffer kernel component. A local app can exploit it to run code with kernel privileges.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Apple Multiple Products affected ? fixed ?

## Fix

Update Apple devices to a patched iOS, iPadOS, macOS or watchOS release per Apple's vendor instructions (fixed versions not stated in sources).

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30807
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2021-30807
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2021-30807

## From the sources

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_